5098 matches found
CVE-2021-26899
Technical details for CVE-2021-26899, including affected product/version, root cause, impact, and fix, are not provided in the connected documents. Monitor for updates from official sources.
CVE-2021-38671
Technical details about CVE-2021-38671 are not publicly available in the provided documents; monitor for updates and cross-check with official advisories for affected products and fixes.
CVE-2022-29126
Technical details for CVE-2022-29126 are not provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates from the referenced sources.
CVE-2019-1089
Technical details about CVE-2019-1089 are not publicly provided in the connected documents. The initial entry notes an elevation of privilege in rpcss.dll but no vendor/product/version specifics are given here. Monitor for updates.
CVE-2022-21983
CVE-2022-21983 is a Win32 Stream Enumeration Remote Code Execution vulnerability. The connected sources show an in-scope CVE with a network attack vector and high impact: CVSSv3.1 base score 7.5 (HIGH), with no authentication (NONE) and user interaction required (REQUIRED); confidentiality, integ...
CVE-2022-29132
Technical details about CVE-2022-29132 (Windows Print Spooler elevation) are not provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for official updates.
CVE-2026-50380
CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...
CVE-2019-1118
CVE-2019-1118 is a DirectWrite remote code execution vulnerability described as existing in the way DirectWrite handles objects in memory. The CVE entry notes it is distinct from nearby CVEs and lists high-severity metrics (CVSSv3 base 8.8, network attack, user interaction required) indicating a ...
CVE-2022-21836
CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...
CVE-2022-21893
Technical details about CVE-2022-21893 are not provided in the connected documents. The supplied sources include high-level vulnerability descriptions and update references, but no specifics on affected products/versions or fixes. Monitor for updated, concrete disclosures.
CVE-2022-23270
Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.
CVE-2024-21363
Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.
CVE-2022-33670
Technical details about CVE-2022-33670 (affected components, exploit vectors, impact, and fixes) are not provided in the supplied documents; no concrete information is available. Monitor for updates.
CVE-2023-24876
Summary (supported by CNVD-2023-30866): Microsoft PostScript and PCL6 Class Printer Driver has a remote code execution vulnerability. The CNVD entry describes a remote code execution flaw in these Microsoft printer drivers. The CVE-2023-24876 listing on NVD also identifies this as a Remote Code E...
CVE-2024-20683
Technical details are not publicly provided in the supplied documents. No specifics on affected products, versions, impact, or fixes are available here; monitor official sources for updates.
CVE-2026-56188
CVE-2026-56188: A race-condition in the Windows Server Network driver (concurrent access to a shared resource) can allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Windows Server Network driver and is described as a remote code execution flaw with ...
CVE-2022-21874
CVE-2022-21874 is a Windows Security Center API RCE vulnerability. Public details in the connected documents describe it as an RCE in the Windows Security Center API with a CVSS v3.1 base score of 7.8 (High) and a Local attack vector requiring user interaction for exploitation. Exploitation conte...
CVE-2022-34714
Technical details about CVE-2022-34714 are not provided in the attached documents. The connected items do not describe affected products, root cause, impact, or remediation for this CVE. Monitor for updates.
CVE-2022-35792
Technical details (affected product/versions, root cause, exploit information, and remediation) are not provided in the connected documents for CVE-2022-35792. Monitor for updates.
CVE-2023-21556
Technical details about CVE-2023-21556 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.
CVE-2024-21362
Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.
CVE-2026-33829
CVE-2026-33829 concerns the Windows Snipping Tool and is assigned a CVSSv3.1 base score of 4.3 (Medium). The vulnerability is described with a network attack vector but requires user interaction and does not affect integrity or availability, with confidentiality impact listed as Low. The metric i...
CVE-2021-34480
Technical details about CVE-2021-34480 are not provided in the connected documents. Public descriptions exist, but no specifics on affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2022-35769
Technical details for CVE-2022-35769 (Windows PPP DoS) are not provided in the supplied documents. No affected product/version or remediation is described here. Monitor for updates from Microsoft and Vulners for confirmed specifics.
CVE-2022-44707
Technical details about CVE-2022-44707 are not provided in the supplied documents. The connected set does not describe affected products/versions or remediation; monitor for updates.
CVE-2019-1120
Technical details about CVE-2019-1120 are not publicly provided in the supplied documents; monitor for official updates.
CVE-2020-17096
Technical details about CVE-2020-17096 are not provided in the connected documents. Available sources mention impact and CVSS but do not disclose affected product versions, root cause, exploit status, or fixes in this data set. Monitor for updates.
CVE-2022-26831
CVE-2022-26831 : Windows LDAP Denial of Service vulnerability. The vulnerability is described as a Windows LDAP DoS issue with a Network attack vector (no user interaction) and a high-impact on availability (per CVSS v3.1: 7.5, HIGH; CVSS v2: 5.0, MEDIUM). Connected sources confirm the Windows LD...
CVE-2022-29122
Technical details for CVE-2022-29122 (affected product, root cause, exploit scope) are not provided in the supplied documents. Monitor official Microsoft advisories and the CVE entry for updates and remediation guidance.
CVE-2024-20663
Technical details about CVE-2024-20663 are not provided in the supplied documents. No confirmed affected products, versions, root cause, or remediation are disclosed; monitor for updates.
CVE-2021-34460
Technical details about CVE-2021-34460 are not publicly available in the provided documents. The connected sources do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2022-34704
CVE-2022-34704 is a Windows Defender Credential Guard Information Disclosure vulnerability. The CVSS‑3.1 base score is 4.7 (Medium) with Local attack vector, HIGH attack complexity, LOW privileges required, and NONE user interaction. Confidentiality impact is HIGH; integrity and availability are ...
CVE-2024-21320
CVE-2024-21320 is a Windows themes spoofing vulnerability with public detail: Exploit-DB describes an NTLM hash-leak via a malicious Windows theme, demonstrating how a crafted .theme file can exfiltrate credentials. The NVD entry labels the issue as Windows Themes Spoofing Vulnerability with a CV...
CVE-2021-40469
CVE-2021-40469 is a Windows DNS Server Remote Code Execution vulnerability. Connected sources indicate exploitation requires a privileged user account and is network-exploitable with low attack complexity, but exploitation in the wild is not strongly evidenced: the issue was noted as exploitable ...
CVE-2024-21314
CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...
CVE-2021-26435
Technical details about CVE-2021-26435 are not publicly available in the provided connected documents. The records reference the vulnerability and related CVEs but do not disclose affected components, root cause, impact, or fixes. Monitor for updates.
CVE-2022-29104
Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.
CVE-2023-21541
Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.
CVE-2023-21692
CVE-2023-21692 is described as a Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution vulnerability. The connected documents provide limited details: they cite PEAP RCE and do not specify affected products, versions, or root cause beyond the general Microsoft PEAP c...
CVE-2024-20687
CVE-2024-20687 is a DoS vulnerability in the Microsoft AllJoyn API. The NVD entry notes a network-based attack with low complexity that results in availability impact (I: C, A: C? actually A). The provided metrics show CVSS 3.1 base score 7.5, vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicatin...
CVE-2022-21857
Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...
CVE-2022-21920
CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...
CVE-2022-23253
CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...
CVE-2023-21769
CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...
CVE-2024-20694
CVE-2024-20694 is described as a Windows CoreMessaging Information Disclosure vulnerability. The initial description provides a CVSSv3.1 vector: Local attack vector, Low attack complexity, Low privileges required, no user interaction, with a High confidentiality impact and a Medium base score (5....
CVE-2026-62818
CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...
CVE-2019-0975
CVE-2019-0975 describes a security feature bypass in Active Directory Federation Services (ADFS) due to improper updates to the list of banned IP addresses. Exploitation requires a victim ADFS administrator to perform the list-update action, enabling an attacker to bypass security checks. The ass...
CVE-2022-26919
Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.
CVE-2022-22034
Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.
CVE-2022-24492
CVE-2022-24492 is a Remote Code Execution vulnerability in Windows RPC Runtime. The connected Akamai blog notes that Windows RPC-related RCE vulnerabilities were patched in Microsoft’s April 2022 Patch Tuesday, including CVE-2022-24492, with patches issued as part of the Windows security updates....